Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: jI5Cw/Fywuh33Ds3uwjJaLRv8v1VZIVaaXMuBCoBRew=
Subject key identifier: 3E:C4:A5:11:EB:72:BD:3C:0A:C5:2A:2A:2E:2E:4D:71:4B:5E:E4:37
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019749D5CE05F42B9F216D94628D034E00C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0697
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: jSxfi9z8kLaG8PYhM7+ZtCGD3pTjc5M6QQA/r26PL3A=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ce:05:f4:2b:9f:21:6d:94:62:8d:03:4e:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=3ec4a511eb72bd3c0ac52a2a2e2e4d714b5ee437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:3e:7e:66:79:87:01:96:46:c2:64:de:40:
c0:bf:d9:45:3f:5a:c3:cf:0a:c5:15:2d:7e:52:5c:
af:6a:fd:75:ae:84:6f:d0:a3:78:af:38:78:a4:97:
4c:81:39:52:78:db:0a:0f:f2:ee:5c:11:6e:ca:2f:
95:a3:13:8e:68:cc:90:69:8f:ca:06:0f:d5:34:85:
af:13:70:f8:91:13:02:3b:9c:03:39:80:de:b5:f7:
1d:fc:d4:af:f5:33:33:6f:90:20:7e:75:50:6c:5c:
38:2e:53:ce:77:5c:2e:57:1a:7a:16:59:f0:cd:8f:
d8:95:03:08:2b:24:dd:8d:ed:e8:39:6e:d4:5e:c3:
eb:9d:ff:1b:a6:5c:e3:fb:82:0d:aa:d5:30:d4:b3:
65:4b:62:94:ed:c5:fc:ba:4d:11:e9:1f:a5:85:5f:
15:c6:36:1c:e4:b8:ac:0e:36:5d:4e:ea:27:4d:ac:
22:53:ca:b1:cc:21:fa:b0:de:6b:15:a8:d7:16:0e:
bf:49:c9:06:dd:64:ed:1c:5c:0b:a9:51:c6:72:28:
de:cb:13:18:fd:c0:f2:a9:cf:01:83:5c:ae:71:9c:
a8:e2:a0:e8:d2:8a:00:25:43:36:1f:77:08:98:2c:
03:94:bf:26:81:0c:ea:64:15:29:6f:96:f5:ed:80:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:A5:11:EB:72:BD:3C:0A:C5:2A:2A:2E:2E:4D:71:4B:5E:E4:37
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:78:c8:9e:f7:bf:e6:2d:42:47:b3:fe:fe:79:79:2f:0e:38:
e2:cc:5e:88:cf:90:15:9e:f1:dc:ff:11:f7:a6:84:13:3f:ca:
a8:cc:da:c3:72:4b:05:7a:e6:74:f5:07:5a:0f:d8:00:30:29:
9b:3c:cc:8d:07:c2:dd:8b:3c:e4:21:35:87:52:40:67:5e:37:
61:2a:af:47:a4:46:60:9e:d9:d6:65:b2:d4:8b:91:a2:ef:91:
cb:5d:32:bc:3e:d3:31:c6:23:ba:b0:ff:ec:a3:09:0c:ad:60:
9c:a8:9e:df:8f:ca:a3:06:6e:b8:29:b2:39:ce:77:fb:1a:e7:
44:ca:f4:2a:2a:42:30:10:dc:13:31:9f:af:c1:f4:a5:62:17:
a9:1e:89:fc:6a:24:34:93:3e:1e:7b:a8:4e:35:60:5f:f8:7f:
99:6f:b1:c2:dc:c6:bd:cd:2b:e6:e8:06:c9:7d:ef:d3:4a:ac:
4f:a6:1a:7b:e4:62:a9:70:3d:1c:49:07:f4:43:40:a6:01:ca:
5b:00:74:c2:1d:62:2c:37:8b:ec:9f:a8:3f:5f:dd:75:3d:cb:
3a:be:a1:c1:a8:1c:a8:05:4b:e2:e5:51:b8:22:4f:15:6d:7d:
06:e6:43:6f:a3:01:d8:67:45:be:97:7a:0f:00:aa:dd:b5:67:
d4:53:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:06 2025 by rpki-client